You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: doc/magic_cards_notes.md
+16-4Lines changed: 16 additions & 4 deletions
Original file line number
Diff line number
Diff line change
@@ -1043,7 +1043,7 @@ No implemented commands today
1043
1043
| 7AFF000000000000BAFA000000000008 | UFUID |
1044
1044
| 7AFF0000000000000000000000000008 | ZUID |
1045
1045
1046
-
*Not all tags are the same!* UFUID, ZUID and PFUID* are not full implementations of Magic85 - they only acknowledge the first 8 (except wakeup command) and last config byte(s).
1046
+
*Not all tags are the same!* UFUID, ZUID and PFUID* are not full implementations of USCUID - they only acknowledge the first 8 (except wakeup command) and last config byte(s).
1047
1047
1048
1048
*Read and write config commands are flipped
1049
1049
@@ -1053,9 +1053,9 @@ Well-known variations are described below.
1053
1053
1054
1054
^[Top](#top)
1055
1055
1056
-
Known as "write only once", which is only partially true.
1056
+
Known as "write only once", which is only partially true. Please note that some newer FUIDs have had ton configration blocks locked down and are truly a write-once tag.
1057
1057
1058
-
Allows direct write to block 0 only when UID is default `AA55C396`. But always could be rewritten multiple times with backdoors commands.
1058
+
Allows direct write to block 0 only when UID is default `AA55C396`. If your tag responds to a gen4 magic wakeup, the UID could always be rewritten multiple times with backdoors commands.
1059
1059
1060
1060
Backdoor commands are available even after the personalization and makes that tag detectable.
1061
1061
@@ -1074,6 +1074,8 @@ That's a key difference from [OTP](#mifare-classic-direct-write-otp)/[OTP 2.0](#
1074
1074
1075
1075
^[Top](#top)
1076
1076
1077
+
Unlocked tag type:
1078
+
1077
1079
```
1078
1080
hf mf info
1079
1081
...
@@ -1082,6 +1084,15 @@ hf mf info
1082
1084
1083
1085
```
1084
1086
1087
+
or locked down tag type:
1088
+
1089
+
```
1090
+
hf mf info
1091
+
...
1092
+
[+] Magic capabilities... Write Once / FUID
1093
+
1094
+
```
1095
+
1085
1096
### Parsed configuration
1086
1097
1087
1098
^[Top](#top)
@@ -1103,6 +1114,7 @@ hf mf info
1103
1114
[+] 00 .. Unknown
1104
1115
[+] 08 SAK
1105
1116
```
1117
+
**Note: this is only possile on the FUID style that has not been locked down.
0 commit comments